Tool on Alwaldend

Tools

Mon, 01 Jan 0001 00:00:00 +0000

This tree contains developer tools and reusable Bazel rule modules. All tracked content follows the repository’s public-source policy. Standalone rules_* modules retain their own Bzlmod names and public build APIs, with documentation on the main repository site. They do not own separate landing sites.

Requirements

Bazel targets MUST use repository-internal visibility except for standalone Bazel rule modules and toolchain types whose owner explicitly exposes a public build API.
Tool artifacts MUST NOT be published as first-party product artifacts.
Standalone Bazel rule modules MAY publish their reusable build APIs through their explicit module release workflow.
Production build targets MAY consume the public build APIs of standalone Bazel rule modules and toolchains. Other tool targets MUST NOT be dependencies of production build targets.
Tool targets intended for repository-wide use MUST use visibility = ["//:__subpackages__"].
Tool targets MAY be used in tests and explicit source-generation/update targets.

An explicit source-generation/update target is a developer workflow, not part of the production build graph. It may depend on a tool from this tree and use write_source_file to update a checked-in source artifact. Normal production and documentation targets must consume that checked-in artifact directly; they must not depend on the generator, its tool, or an action-generated copy.

Mon, 01 Jan 0001 00:00:00 +0000

Bazel session cleanup

The repository’s .codex/config.toml queues asynchronous Bazel expunge when a Codex session ends. Review and trust the hook with /hooks in Codex; project hooks do not run until trusted. A completed assistant turn does not trigger cleanup.

If /hooks is empty in a linked Git worktree, check the primary checkout’s .codex/config.toml. In Codex CLI 0.153.4, observed on 2026-09-06, config/read returned the primary checkout’s configuration even though its project-layer metadata named the linked worktree. That primary configuration had no hooks, so hooks/list returned an empty list. The exact worktree TOML listed both hooks in an isolated normal checkout; separate user-config probes also accepted both TOML and JSON. Changing formats is therefore not an established fix. Merge the hook configuration and update the primary checkout, then start a new CLI session and check /hooks to trust it. Recheck configuration resolution after upgrading Codex; this is an observed version-specific behavior, not a guarantee for every release.

Mon, 01 Jan 0001 00:00:00 +0000

Gradle wrapper

//tools/gradle:gradle-wrapper runs the pinned Gradle distribution from third_party/net_gradle_gradle with the Java runtime selected by the existing rules_java toolchain. It does not download anything at run time.

bazel_agent bazel run //tools/gradle:gradle-wrapper -- --version

Gradle caches remain under ignored out/gradle/. Set GRADLE_CACHE_ROOT to redirect them for a task.

Mon, 01 Jan 0001 00:00:00 +0000

project-dns Specification

Purpose

Record the retirement of rules_binary_toolchain landing infrastructure while preserving its reusable Bazel module.

Requirements

Requirement: Keep landing infrastructure retired

The module SHALL follow the tools boundary and SHALL have no dedicated landing DNS declarations, Terraform root, or operational source exports.

Scenario: Inspect the module after landing retirement

WHEN the module is consumed from tools/rules_binary_toolchain
THEN its reusable Bazel rules remain available without landing infrastructure.

Mon, 01 Jan 0001 00:00:00 +0000

Rules binary toolchain

Purpose

Provide Bazel toolchains and runnable targets for packaged executable binaries, including their runtime files. This source baseline was observed on 2026-09-08 at revision 550d7e79b1f5fdbc2b6017b75178471d6914082f.

Sources: project description, lock parsing, module extension, archive repositories, and runnable wrapper.

Requirements

Requirement: Select archives from the declared toolchain lock

The module extension SHALL resolve a requested toolchain by name and version from its JSON lock and create repositories for the matching archives.

Mon, 01 Jan 0001 00:00:00 +0000

project-dns Specification

Purpose

Record the retirement of rules_hugo landing infrastructure while preserving its reusable Bazel module.

Requirements

Requirement: Keep landing infrastructure retired

The module SHALL follow the tools boundary and SHALL have no dedicated landing DNS declarations, Terraform root, or operational source exports.

Scenario: Inspect the module after landing retirement

WHEN the module is consumed from tools/rules_hugo
THEN its reusable Bazel rules remain available without landing infrastructure.

Mon, 01 Jan 0001 00:00:00 +0000

Rules Hugo

Purpose

Build and run Hugo sites with registered Bazel toolchains, site source archives, and declared PostCSS tooling. This source baseline was observed on 2026-09-08 at revision 550d7e79b1f5fdbc2b6017b75178471d6914082f.

Sources: project description, site provider rule, build rule, toolchain extension, and worker rule.

Requirements

Requirement: Separate site inputs from execution tools

al_hugo_site SHALL retain the .tar site archive in the target configuration and resolve its executable PostCSS dependency in the execution configuration. Build rules SHALL obtain Hugo from the registered Hugo toolchain.

Mon, 01 Jan 0001 00:00:00 +0000

project-rules-openspec Specification

Purpose

Define reusable Bazel validation and execution behavior for owner-local OpenSpec workspaces.

Requirements

OpenSpec validation

The system SHALL validate one owner-local OpenSpec workspace in a sandbox using the pinned OpenSpec CLI.

Scenario: current validation

WHEN a caller runs the validation target
THEN OpenSpec validates current specifications and active changes with strict mode

Scenario: archived validation

WHEN a caller requests archived validation
THEN OpenSpec validates completed archived changes with strict mode

Mon, 01 Jan 0001 00:00:00 +0000

project-dns Specification

Purpose

Record the retirement of rules_template landing infrastructure while preserving its reusable Bazel module.

Requirements

Requirement: Keep landing infrastructure retired

The module SHALL follow the tools boundary and SHALL have no dedicated landing DNS declarations, Terraform root, or operational source exports.

Scenario: Inspect the module after landing retirement

WHEN the module is consumed from tools/rules_template
THEN its reusable Bazel rules remain available without landing infrastructure.

Mon, 01 Jan 0001 00:00:00 +0000

Rules template

Purpose

Render Go text templates from declared data files through a command and a Bazel toolchain rule. This source baseline was observed on 2026-09-08 at revision 550d7e79b1f5fdbc2b6017b75178471d6914082f. The command operates on one template and output per invocation; the rule’s list attributes do not establish a multi-template rendering guarantee.

Sources: project description, command flags, templater, template functions, and Bazel action.

Requirements

Requirement: Load supported data formats into template context

The template command SHALL load data files in argument order into DataFiles, decode .toml, .json, .ndjson, and .yaml data, and expose .txt files as lines without structured decoding. --extension SHALL override extension selection for the supplied data files.

Mon, 01 Jan 0001 00:00:00 +0000

terraform-execution Specification

Purpose

Provide reusable Bazel rules that acquire pinned Terraform providers and run Terraform with declared configuration, executable, and provider inputs.

Requirements

Requirement: Verified provider acquisition

The provider module extension SHALL download immutable HTTPS archives with mandatory SHA256 integrity through Bazel repository fetching. It SHALL select one version for each canonical provider source across the extension graph.

Scenario: Conflicting provider versions

WHEN declarations select different versions of the same provider source
THEN extension resolution fails before provider repositories are created.

Scenario: Verified archive

WHEN a provider archive is fetched
THEN Bazel verifies the declared integrity and exposes its canonical source, version, platform, and packed filesystem-mirror path.

Requirement: Declared provider execution

Terraform rules SHALL place selected provider archives in runfiles using the packed filesystem-mirror layout. The runner SHALL configure only that mirror for provider installation and SHALL preserve the declared Terraform executable.

al_alias_map

Mon, 01 Jan 0001 00:00:00 +0000

al_alias_map

load("@com_alwaldend_src//tools/bzl/main/bzl:al_alias_map.bzl", "al_alias_map")

al_alias_map(aliases, visibility)

Generate aliases from an alias map

PARAMETERS

Name	Description	Default Value
aliases	alias map, keys are names, values are alias arguments	none
visibility	default visibility	`["//:__subpackages__"]`

al_apply_patches

Mon, 01 Jan 0001 00:00:00 +0000

al_apply_patches

load("@com_alwaldend_src//tools/patch/main/bzl:al_apply_patches.bzl", "al_apply_patches")

al_apply_patches(name, src, patches, visibility, **kwargs)

Create a genrule applying patches

PARAMETERS

Name	Description	Default Value
name	genrule name	none
src	source archive label	none
patches	patches label	none
visibility	visibility	`["//:__subpackages__"]`
kwargs	other genrule kwargs	none

al_bzl_generate_repository

Mon, 01 Jan 0001 00:00:00 +0000

al_bzl_generate_repository

load("@com_alwaldend_src//tools/bzl/main/bzl:al_bzl_generate_repository.bzl", "al_bzl_generate_repository")

al_bzl_generate_repository(name, files, repo_mapping)

Generate a repository

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this repository.	Name	required
files	Files to generate, keys are paths, values are file contents	Dictionary: String -> String	optional	`{}`
repo_mapping	In `WORKSPACE` context only: a dictionary from local repository name to global repository name. This allows controls over workspace dependency resolution for dependencies of this repository. For example, an entry `"@foo": "@bar"` declares that, for any time this repository depends on `@foo` (such as a dependency on `@foo//some:target`, it should actually resolve that dependency within globally-declared `@bar` (`@bar//some:target`). This attribute is not supported in `MODULE.bazel` context (when invoking a repository rule inside a module extension’s implementation function).	Dictionary: String -> String	optional

al_bzl_library_map

Mon, 01 Jan 0001 00:00:00 +0000

al_bzl_library_map

load("@com_alwaldend_src//tools/bzl/main/bzl:al_bzl_library_map.bzl", "al_bzl_library_map")

al_bzl_library_map(name, visibility, libs, deps, **kwargs)

Create bzl_library targets from a map

PARAMETERS

Name	Description	Default Value
name	combined bzl_library target name	none
visibility	-	`None`
libs	bzl_library names	`{}`
deps	other al_bzl_library_map targets	`[]`
kwargs	bzl_library kwargs	none

al_bzl_target_doc

Mon, 01 Jan 0001 00:00:00 +0000

al_bzl_target_doc

load("@com_alwaldend_src//tools/bzl/main/bzl:al_bzl_target_doc.bzl", "al_bzl_target_doc")

al_bzl_target_doc(name, visibility, subpackages)

Document bazel targets

PARAMETERS

Name	Description	Default Value
name	target name	none
visibility	-	none
subpackages	list of subpackages	`[]`

al_bzlenv_binary

Mon, 01 Jan 0001 00:00:00 +0000

al_bzlenv_binary

load("@com_alwaldend_src//tools/bzlenv/main/bzl:al_bzlenv_binary.bzl", "al_bzlenv_binary")

al_bzlenv_binary(name, activate, tools)

Dev shell binary

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
activate	Activation script	Label	optional	`"@com_alwaldend_src//tools/bzlenv/main/sh:activate"`
tools	Tools, keys are tool names, values are tool labels	Dictionary: String -> Label	optional	`{}`

al_combine_files

Mon, 01 Jan 0001 00:00:00 +0000

al_combine_files

load("@com_alwaldend_src//tools/txt/main/bzl:al_combine_files.bzl", "al_combine_files")

al_combine_files(name, srcs, **kwargs)

Create a genrule combining several files into one

PARAMETERS

Name	Description	Default Value
name	genrule target	none
srcs	list of labels to combine	none
kwargs	other genrule kwargs	none

al_compile_pip_requirements_combined

Mon, 01 Jan 0001 00:00:00 +0000

al_compile_pip_requirements_combined

load("@com_alwaldend_src//tools/py/main/bzl:al_compile_pip_requirements_combined.bzl", "al_compile_pip_requirements_combined")

al_compile_pip_requirements_combined(name, srcs, **kwargs)

Create compile_pip_requirements target for several requirement files

PARAMETERS

Name	Description	Default Value
name	compile_pip_requirements name	none
srcs	list of labels of requirement files to combine	none
kwargs	kwargs for `compile_pip_requirements`	none

al_drawio_run_binary

Mon, 01 Jan 0001 00:00:00 +0000

al_drawio_run_binary

load("@com_alwaldend_src//tools/drawio/main/bzl:al_drawio_run_binary.bzl", "al_drawio_run_binary")

al_drawio_run_binary(name, srcs, out, arguments, cmd_timeout)

Run drawio a a build action

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
srcs	Sources	List of labels	optional	`[]`
out	Output	Label; nonconfigurable	required
arguments	Arguments, location statements are expanded	List of strings	required
cmd_timeout	Drawio command timeout	String	optional	`"1m"`

al_drawio_toolchain

Mon, 01 Jan 0001 00:00:00 +0000

al_drawio_toolchain

load("@com_alwaldend_src//tools/drawio/main/bzl:al_drawio_toolchain.bzl", "al_drawio_toolchain")

al_drawio_toolchain(name, drawio)

Drawio toolchain

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
drawio	Drawio binary	Label	required

al_genquery_write_to_source_file

Mon, 01 Jan 0001 00:00:00 +0000

al_genquery_write_to_source_file

load("@com_alwaldend_src//tools/bzl/main/bzl:al_genquery_write_to_source_file.bzl", "al_genquery_write_to_source_file")

al_genquery_write_to_source_file(name, expression, scope, var_name, out_file)

Write genquery result to a bzl file

Example:

    al_genquery_write_to_source_file(
        name = "al_bzl_libs",
        expression = """
            filter(
                "^//",
                attr(
                    "srcs",
                    ".{3,}",
                    kind(
                        "bzl_library",
                        deps("//bzl")
                    )
                )
            )
        """,
        out_file = "al_bzl_libs.bzl",
        scope = ["//bzl"],
        var_name = "AL_BZL_LIBS",
    )

PARAMETERS

Name	Description	Default Value
name	name prefix	none
expression	genquery expression	none
scope	genquery scope	none
var_name	variable name in the generated .bzl file	none
out_file	output bzl file	none

al_genrule

Mon, 01 Jan 0001 00:00:00 +0000

al_genrule

load("@com_alwaldend_src//tools/shell_worker/main/bzl:al_genrule.bzl", "al_genrule")

al_genrule(test, executable, **kwargs)

Generate al_genrule target

PARAMETERS

Name	Description	Default Value
test	If set, use al_genrule_test	`False`
executable	if set, use al_genrule_executable	`False`
kwargs	kwargs for the rule	none

al_genrule_rule

Mon, 01 Jan 0001 00:00:00 +0000

al_genrule_executable

load("@com_alwaldend_src//tools/shell_worker/main/bzl:al_genrule_rule.bzl", "al_genrule_executable")

al_genrule_executable(name, srcs, data, outs, cmd, set_flags, shell, tools, worker)

Build executable using shell worker

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
srcs	Sources, will not be added to runfiles	List of labels	optional	`[]`
data	Data, will be added to runfiles	List of labels	optional	`[]`
outs	Outputs	List of labels; nonconfigurable	required
cmd	Script to execute	String	required
set_flags	set flags	List of strings	optional	`["-eux"]`
shell	shell to use	String	optional	`"/bin/sh"`
tools	Tools, will be added to runfiles	List of labels	optional	`[]`
worker	Worker binary	Label	optional	`"@com_alwaldend_src//tools/shell_worker"`

al_genrule_src

Mon, 01 Jan 0001 00:00:00 +0000

al_genrule_src

load("@com_alwaldend_src//tools/pkg/main/bzl:al_genrule_src.bzl", "al_genrule_src")

al_genrule_src(name, srcs, visibility)

Create a filegroup and a genrule generating a tar archive

PARAMETERS

Name	Description	Default Value
name	genrule name	none
srcs	source labels	`[]`
visibility	-	`["//:__subpackages"]`

al_genrule_with_wheels

Mon, 01 Jan 0001 00:00:00 +0000

al_genrule_with_wheels

load("@com_alwaldend_src//tools/py/main/bzl:al_genrule_with_wheels.bzl", "al_genrule_with_wheels")

al_genrule_with_wheels(name, wheels, srcs, cmd, **kwargs)

Regular genrule with wheels added to ${PYTHONPATH}

PARAMETERS

Name	Description	Default Value
name	genrule name	none
wheels	list of wheel labels	none
srcs	srcs for the genrule	`[]`
cmd	genrule cmd	`[]`
kwargs	other genrule kwargs	none

al_git_binary

Mon, 01 Jan 0001 00:00:00 +0000

al_git_binary

load("@com_alwaldend_src//tools/git/main/bzl:al_git_binary.bzl", "al_git_binary")

al_git_binary(name, arguments)

Run git binary

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
arguments	Git arguments (templated)	List of strings	optional	`[]`

al_git_changelog

Mon, 01 Jan 0001 00:00:00 +0000

al_git_changelog

load("@com_alwaldend_src//tools/git/main/bzl:al_git_changelog.bzl", "al_git_changelog")

al_git_changelog(name, visibility, git_binary, subpackages)

Create changelog target

PARAMETERS

Name	Description	Default Value
name	target name prefix	none
visibility	visibility	none
git_binary	-	`"@git//:git"`
subpackages	subpackages	`[]`

al_git_current_state

Mon, 01 Jan 0001 00:00:00 +0000

al_git_extension

Mon, 01 Jan 0001 00:00:00 +0000

al_git_extension

al_git_extension = use_extension("@com_alwaldend_src//tools/git/main/bzl:al_git_extension.bzl", "al_git_extension")
al_git_extension.local_git(name)

Create git repos

TAG CLASSES

local_git

Attributes

Name	Description	Type	Mandatory	Default
name	Name	Name	required

al_git_info_file

Mon, 01 Jan 0001 00:00:00 +0000

al_git_info_file

load("@com_alwaldend_src//tools/git/main/bzl:al_git_info_file.bzl", "al_git_info_file")

al_git_info_file(name, git_state, git_tool, timeout)

Generate git info file

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
git_state	Files that should invalidate the cache on new commit	List of labels	optional	`[]`
git_tool	Git tool to use	Label	optional	`"@com_alwaldend_src//tools/git/main/go"`
timeout	Timeout in seconds	Integer	optional	`60`

al_git_repo

Mon, 01 Jan 0001 00:00:00 +0000

al_git_repo

load("@com_alwaldend_src//tools/git/main/bzl:al_git_repo.bzl", "al_git_repo")

al_git_repo(name, repo_mapping)

Git repo

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this repository.	Name	required
repo_mapping	In `WORKSPACE` context only: a dictionary from local repository name to global repository name. This allows controls over workspace dependency resolution for dependencies of this repository. For example, an entry `"@foo": "@bar"` declares that, for any time this repository depends on `@foo` (such as a dependency on `@foo//some:target`, it should actually resolve that dependency within globally-declared `@bar` (`@bar//some:target`). This attribute is not supported in `MODULE.bazel` context (when invoking a repository rule inside a module extension’s implementation function).	Dictionary: String -> String	optional

al_git_resolved_toolchain

Mon, 01 Jan 0001 00:00:00 +0000

al_git_resolved_toolchain

load("@com_alwaldend_src//tools/git/main/bzl:al_git_resolved_toolchain.bzl", "al_git_resolved_toolchain")

al_git_resolved_toolchain(name)

Resolved git toolchain

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required

al_git_run_binary

Mon, 01 Jan 0001 00:00:00 +0000

al_git_run_binary

load("@com_alwaldend_src//tools/git/main/bzl:al_git_run_binary.bzl", "al_git_run_binary")

al_git_run_binary(name, srcs, outs, arguments, git)

Run a git binary as a build action

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
srcs	Files to be made available	List of labels	optional	`[]`
outs	Outputs	List of labels; nonconfigurable	required
arguments	Arguments (Location is expanded)	List of strings	optional	`[]`
git	Git binary	Label	required

al_git_toolchain

Mon, 01 Jan 0001 00:00:00 +0000

al_git_toolchain

load("@com_alwaldend_src//tools/git/main/bzl:al_git_toolchain.bzl", "al_git_toolchain")

al_git_toolchain(name, git_dir, git_path, git_root, invalidation)

Local git toolchain

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
git_dir	Git directory path	String	required
git_path	Git binary path	String	required
git_root	Git workspace path	String	required
invalidation	Files that should invalidate git actions	List of labels	optional	`[]`

al_go_repository

Mon, 01 Jan 0001 00:00:00 +0000

al_go_repository

al_go_repository = use_extension("@com_alwaldend_src//tools/go/main/bzl:al_go_repository.bzl", "al_go_repository")
al_go_repository.go_repository(name, importpath, sum, version)

Extension wrapper around go_repository (useless because you can just call use_repo_rule)

TAG CLASSES

go_repository

Attributes

Name	Description	Type	Mandatory	Default
name	Name	Name	required
importpath	importpath	String	required
sum	checksum	String	optional	`""`
version	-	String	required

al_gzip_extension

Mon, 01 Jan 0001 00:00:00 +0000

al_gzip_extension

al_gzip_extension = use_extension("@com_alwaldend_src//tools/gzip/main/bzl:al_gzip_extension.bzl", "al_gzip_extension")
al_gzip_extension.download(name, integrity, url)

Extension for gzip repos

TAG CLASSES

download

Attributes

Name	Description	Type	Mandatory	Default
name	Name	Name	required
integrity	Integrity	String	optional	`""`
url	Url	String	required

al_gzip_repo

Mon, 01 Jan 0001 00:00:00 +0000

al_gzip_repo

load("@com_alwaldend_src//tools/gzip/main/bzl:al_gzip_repo.bzl", "al_gzip_repo")

al_gzip_repo(name, integrity, repo_mapping, url)

Gzip repo

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this repository.	Name	required
integrity	Integrity	String	optional	`""`
repo_mapping	In `WORKSPACE` context only: a dictionary from local repository name to global repository name. This allows controls over workspace dependency resolution for dependencies of this repository. For example, an entry `"@foo": "@bar"` declares that, for any time this repository depends on `@foo` (such as a dependency on `@foo//some:target`, it should actually resolve that dependency within globally-declared `@bar` (`@bar//some:target`). This attribute is not supported in `MODULE.bazel` context (when invoking a repository rule inside a module extension’s implementation function).	Dictionary: String -> String	optional
url	Url	String	required

al_helm_binary

Mon, 01 Jan 0001 00:00:00 +0000

al_helm_binary

load("@com_alwaldend_src//tools/helm/main/bzl:al_helm_binary.bzl", "al_helm_binary")

al_helm_binary(name, data, arguments, cd)

Helm binary

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
data	Helm chart	List of labels	optional	`[]`
arguments	Helm arguments	List of strings	optional	`[]`
cd	Cd to a directory before running bazel	String	optional	`"."`

al_helm_chart

Mon, 01 Jan 0001 00:00:00 +0000

al_helm_chart

load("@com_alwaldend_src//tools/helm/main/bzl:al_helm_chart.bzl", "al_helm_chart")

al_helm_chart(name, deps, package, source)

Helm chart

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
deps	Helm chart deps	List of labels	optional	`[]`
package	Helm chart package	Label	optional	`None`
source	Helm chart source	Label	optional	`None`

al_helm_chart_info

Mon, 01 Jan 0001 00:00:00 +0000

AlHelmChartInfo

load("@com_alwaldend_src//tools/helm/main/bzl:al_helm_chart_info.bzl", "AlHelmChartInfo")

AlHelmChartInfo(source, package, deps, files_info)

Information about a helm chart

FIELDS

Name	Description
source	Chart sources (PackageFilegroupInfo, optional)
package	Chart package (tgz file)
deps	Chart deps (depset of AlHelmChartInfo)
files_info	Chart file structure (PackageFilesInfo)

al_helm_chart_lock

Mon, 01 Jan 0001 00:00:00 +0000

al_helm_chart_lock

load("@com_alwaldend_src//tools/helm/main/bzl:al_helm_chart_lock.bzl", "al_helm_chart_lock")

al_helm_chart_lock(name, lock, lock_out)

Generate targets for a chart lock

PARAMETERS

Name	Description	Default Value
name	name	none
lock	lock label	none
lock_out	parsed lock filename	none

al_helm_cmds

Mon, 01 Jan 0001 00:00:00 +0000

al_helm_deps

Mon, 01 Jan 0001 00:00:00 +0000

al_helm_deps

al_helm_deps = use_extension("@com_alwaldend_src//tools/helm/main/bzl:al_helm_deps.bzl", "al_helm_deps")
al_helm_deps.from_locks(name, integrity, locks)

Extension to download helm dependencies

TAG CLASSES

from_locks

Attributes

Name	Description	Type	Mandatory	Default
name	Repo name	Name	required
integrity	Intergrity for locks, keys are packages, values are integrity	Dictionary: String -> String	optional	`{}`
locks	Helm lock labels	List of labels	optional	`[]`

al_helm_deps_repo

Mon, 01 Jan 0001 00:00:00 +0000

al_helm_deps_repo

load("@com_alwaldend_src//tools/helm/main/bzl:al_helm_deps_repo.bzl", "al_helm_deps_repo")

al_helm_deps_repo(name, integrity, locks, repo_mapping)

Helm deps repo

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this repository.	Name	required
integrity	Intergrity for locks, keys are packages, values are integrity	Dictionary: String -> String	optional	`{}`
locks	Lock labels to parse	List of labels	optional	`[]`
repo_mapping	In `WORKSPACE` context only: a dictionary from local repository name to global repository name. This allows controls over workspace dependency resolution for dependencies of this repository. For example, an entry `"@foo": "@bar"` declares that, for any time this repository depends on `@foo` (such as a dependency on `@foo//some:target`, it should actually resolve that dependency within globally-declared `@bar` (`@bar//some:target`). This attribute is not supported in `MODULE.bazel` context (when invoking a repository rule inside a module extension’s implementation function).	Dictionary: String -> String	optional

al_helm_toolchain

Mon, 01 Jan 0001 00:00:00 +0000

al_helm_toolchain

load("@com_alwaldend_src//tools/helm/main/bzl:al_helm_toolchain.bzl", "al_helm_toolchain")

al_helm_toolchain(name, helm)

Helm toolchain

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
helm	Helm binary	Label	required

al_http_server_binary

Mon, 01 Jan 0001 00:00:00 +0000

al_http_server_binary

load("@com_alwaldend_src//tools/http_server/main/bzl:al_http_server_binary.bzl", "al_http_server_binary")

al_http_server_binary(name, srcs, arguments)

Run a http server

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
srcs	Files to symlink	List of labels	optional	`[]`
arguments	Arguments	List of strings	optional	`[]`

al_install_file

Mon, 01 Jan 0001 00:00:00 +0000

al_install_file

load("@com_alwaldend_src//tools/install_file/main/bzl:al_install_file.bzl", "al_install_file")

al_install_file(name, args, install_file_label, visibility, **py_binary_kwargs)

Create py_binary target to install file

PARAMETERS

Name	Description	Default Value
name	target name	none
args	install-file args	`[]`
install_file_label	-	`"//tools/install_file/main/py:install_file_lib"`
visibility	-	`["//:__subpackages__"]`
py_binary_kwargs	-	none

al_lua_library

Mon, 01 Jan 0001 00:00:00 +0000

al_lua_library

load("@com_alwaldend_src//tools/lua/main/bzl:al_lua_library.bzl", "al_lua_library")

al_lua_library(name, srcs, check, stylua_config_label, stylua_label, pkg_kwargs, visibility)

Generate targets for a lua library

PARAMETERS

Name	Description	Default Value
name	library name	none
srcs	library sources	none
check	if set, only these files will be checked	`[]`
stylua_config_label	-	`"//tools/stylua:stylua_config"`
stylua_label	-	`"//tools/stylua"`
pkg_kwargs	-	`{}`
visibility	visibility	`["//:__subpackages__"]`

al_make_install

Mon, 01 Jan 0001 00:00:00 +0000

al_make_install

load("@com_alwaldend_src//tools/make_install/main/bzl:al_make_install.bzl", "al_make_install")

al_make_install(name, srcs)

Create the make install executable and a filegroup

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
srcs	Make install filegroups	List of labels	optional	`[]`

al_make_install_binary

Mon, 01 Jan 0001 00:00:00 +0000

al_make_install_binary

load("@com_alwaldend_src//tools/make_install/main/bzl:al_make_install_binary.bzl", "al_make_install_binary")

al_make_install_binary(name, src, arguments)

Create a binary target for a make install

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
src	Make install target	Label	required
arguments	Arugments for the executable	List of strings	optional	`[]`

al_make_install_filegroup

Mon, 01 Jan 0001 00:00:00 +0000

al_make_install_filegroup

load("@com_alwaldend_src//tools/make_install/main/bzl:al_make_install_filegroup.bzl", "al_make_install_filegroup")

al_make_install_filegroup(name, deps, srcs, diff_args, install_args, install_dir, pkg_prefix)

Create a make install filegroup

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
deps	Deps	List of labels	optional	`[]`
srcs	Sources to install	List of labels	optional	`[]`
diff_args	Diff args	List of strings	optional	`[]`
install_args	Install args	List of strings	optional	`["--compare", "-D"]`
install_dir	Install directory	String	optional	`"${HOME}"`
pkg_prefix	Ignore that prefix for srcs	String	required

al_make_install_filegroup_info

Mon, 01 Jan 0001 00:00:00 +0000

AlMakeInstallFilegroupInfo

load("@com_alwaldend_src//tools/make_install/main/bzl:al_make_install_filegroup_info.bzl", "AlMakeInstallFilegroupInfo")

AlMakeInstallFilegroupInfo(srcs, deps, install_dir, origin, install_args, diff_args, pkg_prefix)

Describe install info for a single filegrop

FIELDS

Name	Description
srcs	depset of PackageFilegroupInfo
deps	depset of AlMakeInstallFilegroupInfo
install_dir	Install directory
origin	Rule label
install_args	Args for the install command
diff_args	Args for the diff command
pkg_prefix	Ignore that prefix for srcs

al_md_data

Mon, 01 Jan 0001 00:00:00 +0000

al_md_data

load("@com_alwaldend_src//tools/md/main/bzl:al_md_data.bzl", "al_md_data")

al_md_data(name, srcs, deps, **kwargs)

Markdown data backed by a filegroup

Targets:

${name}: filegroup

PARAMETERS

Name	Description	Default Value
name	filegroup name	none
srcs	markdown files	none
deps	deps	`[]`
kwargs	filegroup kwargs	none

al_pkg_basic_naming

Mon, 01 Jan 0001 00:00:00 +0000

al_pkg_basic_naming

load("@com_alwaldend_src//tools/pkg/main/bzl:al_pkg_basic_naming.bzl", "al_pkg_basic_naming")

al_pkg_basic_naming(name, deps)

Variables for @rules_pkg

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
deps	Deps to merge	List of labels	optional	`[]`

al_pkg_extract_dir

Mon, 01 Jan 0001 00:00:00 +0000

al_pkg_extract_dir

load("@com_alwaldend_src//tools/pkg/main/bzl:al_pkg_extract_dir.bzl", "al_pkg_extract_dir")

al_pkg_extract_dir(name, src, out, arguments)

Extract an archive into a TreeArtifact

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
src	Archive to unpack	Label	required
out	Output directory name	String	optional	`""`
arguments	Additional arguments	List of strings	optional	`[]`

al_pkg_tar_combined

Mon, 01 Jan 0001 00:00:00 +0000

al_pkg_tar_combined

load("@com_alwaldend_src//tools/pkg/main/bzl:al_pkg_tar_combined.bzl", "al_pkg_tar_combined")

al_pkg_tar_combined(name, srcs, strip_components, **kwargs)

Create a genrule combining several tars into one

PARAMETERS

Name	Description	Default Value
name	genrule name	none
srcs	dicts tar archives ({“label”: “tar label”, “dir”: “target dir”})	`[]`
strip_components	value of –stip-components	`2`
kwargs	other genrule kwargs	none

al_print_deps

Mon, 01 Jan 0001 00:00:00 +0000

al_print_deps

load("@com_alwaldend_src//tools/print_deps/main/bzl:al_print_deps.bzl", "al_print_deps")

al_print_deps()

ASPECT ATTRIBUTES

Name	Type
deps	String

ATTRIBUTES

al_proto_docs

Mon, 01 Jan 0001 00:00:00 +0000

al_proto_docs

load("@com_alwaldend_src//tools/proto/main/bzl:al_proto_docs.bzl", "al_proto_docs")

al_proto_docs(name, src, prefix, visibility, renames)

Generate protobuf documentation

PARAMETERS

Name	Description	Default Value
name	name	none
src	protobuf source file	none
prefix	-	`None`
visibility	visibility	`None`
renames	-	`None`

al_py_binary_shell

Mon, 01 Jan 0001 00:00:00 +0000

al_py_binary_shell

load("@com_alwaldend_src//tools/py/main/bzl:al_py_binary_shell.bzl", "al_py_binary_shell")

al_py_binary_shell(name, deps, srcs, shell_type, shell_label, **kwargs)

Create a py_binary target that allows you to run commands in proper python environment

PARAMETERS

Name	Description	Default Value
name	target name	none
deps	py_binary deps	`[]`
srcs	py_binary srcs	`[]`
shell_type	${BAZEL_PYTHON_SHELL_TYPE}	`"python"`
shell_label	-	`"//tools/py/main/py:bazel_python_shell_lib"`
kwargs	other py_binary kwargs	none

al_py_checker

Mon, 01 Jan 0001 00:00:00 +0000

al_py_checker

load("@com_alwaldend_src//tools/py/main/bzl:al_py_checker.bzl", "al_py_checker")

al_py_checker(name, tool, args_bin, args_test, test_size, disable_fix, **kwargs)

Create -fix and -test targets for a python checker

PARAMETERS

Name	Description	Default Value
name	Name prefix	`None`
tool	Tool label	`None`
args_bin	Args for the binary target	`None`
args_test	Args for the test	`None`
test_size	-	`"small"`
disable_fix	If set, do not create fix target	`False`
kwargs	Kwargs for both targets	none

al_py_checkers

Mon, 01 Jan 0001 00:00:00 +0000

al_py_checkers

load("@com_alwaldend_src//tools/py/main/bzl:al_py_checkers.bzl", "al_py_checkers")

al_py_checkers(name, srcs, isort_label, black_label, mypy_label, flake8_label, pyproject_label)

Generate -fix and -test targets for python checkers

PARAMETERS

Name	Description	Default Value
name	-	none
srcs	list of source file labels	none
isort_label	-	`"//tools/isort"`
black_label	-	`"//tools/black"`
mypy_label	-	`"//tools/mypy"`
flake8_label	-	`"//tools/flake8"`
pyproject_label	-	`"//tools/py:pyproject"`

al_release

Mon, 01 Jan 0001 00:00:00 +0000

al_release

load("@com_alwaldend_src//tools/release/main/bzl:al_release.bzl", "al_release")

al_release(name, srcs, git_bundle, git_state, manifest, project, release_name, release_tool,
           root_prefix)

Rule describing a release

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
srcs	Sources	List of labels	optional	`[]`
git_bundle	Deterministic Git bundle used to generate release metadata	Label	optional	`"@com_alwaldend_src_tools_git//:release_git_state"`
git_state	Additional declared Git state used to generate release metadata	List of labels	optional	`[]`
manifest	Load manifest from a file instead of generating it from srcs	Label	optional	`None`
project	Project package_name	String	required
release_name	Release name	String	required
release_tool	Release tool	Label	optional	`"@com_alwaldend_src//tools/release/main/go"`
root_prefix	Root prefix	String	optional	`"content/docs"`

al_release_binary

Mon, 01 Jan 0001 00:00:00 +0000

al_release_binary

load("@com_alwaldend_src//tools/release/main/bzl:al_release_binary.bzl", "al_release_binary")

al_release_binary(name, srcs, arguments, cmd, oras, release_tool)

Release binary

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
srcs	Releases	List of labels	optional	`[]`
arguments	Arguments	List of strings	optional	`[]`
cmd	Cmd	String	optional	`"deploy"`
oras	Oras binary	Label	optional	`"@com_alwaldend_src//tools/oras"`
release_tool	Release tool	Label	optional	`"@com_alwaldend_src//tools/release/main/go"`

al_release_deployment

Mon, 01 Jan 0001 00:00:00 +0000

al_release_deployment

load("@com_alwaldend_src//tools/release/main/bzl:al_release_deployment.bzl", "al_release_deployment")

al_release_deployment(name, oci_repository)

Deployment info

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
oci_repository	OCI repository url	String	optional	`""`

al_release_deployment_info

Mon, 01 Jan 0001 00:00:00 +0000

AlReleaseDeploymentInfo

load("@com_alwaldend_src//tools/release/main/bzl:al_release_deployment_info.bzl", "AlReleaseDeploymentInfo")

AlReleaseDeploymentInfo(info, info_file)

Deployment info

FIELDS

Name	Description
info	Deployment info struct
info_file	Deployment info file

al_release_deps

Mon, 01 Jan 0001 00:00:00 +0000

al_release_deps

load("@com_alwaldend_src//tools/release/main/bzl:al_release_deps.bzl", "al_release_deps")

al_release_deps(name, srcs, visibility, **kwargs)

Generate a dependency diagram using genquery

PARAMETERS

Name	Description	Default Value
name	name	none
srcs	list of labels to generate deps for (should be full labels)	none
visibility	visibility	`None`
kwargs	kwargs for al_release_files	none

al_release_files

Mon, 01 Jan 0001 00:00:00 +0000

al_release_files

load("@com_alwaldend_src//tools/release/main/bzl:al_release_files.bzl", "al_release_files")

al_release_files(name, deps, srcs, deployments, ignore_suffixes, release_tool)

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
deps	Deps	List of labels	optional	`[]`
srcs	Sources	List of labels	optional	`[]`
deployments	Deployment info	List of labels	optional	`[]`
ignore_suffixes	Ignore src files ending with these suffixes	List of strings	optional	`[]`
release_tool	Release tool	Label	optional	`"@com_alwaldend_src//tools/release/main/go"`

al_release_files_info

Mon, 01 Jan 0001 00:00:00 +0000

AlReleaseFilesInfo

load("@com_alwaldend_src//tools/release/main/bzl:al_release_files_info.bzl", "AlReleaseFilesInfo")

AlReleaseFilesInfo(files, manifest)

Release files

FIELDS

Name	Description
files	File dict, keys are filenames, values are Files
manifest	Release manifest for srcs

al_release_info

Mon, 01 Jan 0001 00:00:00 +0000

AlReleaseInfo

load("@com_alwaldend_src//tools/release/main/bzl:al_release_info.bzl", "AlReleaseInfo")

AlReleaseInfo(release_name, project, files, manifest)

Release information

FIELDS

Name	Description
release_name	Release name (string)
project	Project subdir (string)
files	File dict, keys are filenames, values are Files
manifest	Release manifest (File)

al_repo_map

Mon, 01 Jan 0001 00:00:00 +0000

al_repo_map

al_repo_map = use_extension("@com_alwaldend_src//tools/repo_map/main/bzl:al_repo_map.bzl", "al_repo_map")
al_repo_map.download(name, build_file_content, build_file_native_binary, download_type, executable,
                     repos, strip_prefix)

Extension to create several repos from a map

TAG CLASSES

download

Attributes

Name	Description	Type	Mandatory	Default
name	Name	Name	required
build_file_content	Build file content	String	optional	`""`
build_file_native_binary	Args for a native binary build file	Dictionary: String -> String	optional	`{}`
download_type	Download type	String	optional	`"http_archive"`
executable	Field executable for http_file	Boolean	optional	`False`
repos	Map of repos	Dictionary: String -> List of strings	required
strip_prefix	Strip prefix	String	optional	`""`

al_resolved_toolchain

Mon, 01 Jan 0001 00:00:00 +0000

al_resolved_toolchain

load("@com_alwaldend_src//tools/resolved_toolchain/main/bzl:al_resolved_toolchain.bzl", "al_resolved_toolchain")

al_resolved_toolchain(toolchain_label, **kwargs)

Create a resolved toolchain

PARAMETERS

Name	Description	Default Value
toolchain_label	-	none
kwargs	rule kwargs	none

RETURNS

Resolved toolchain rule

al_rfc_extension

Mon, 01 Jan 0001 00:00:00 +0000

al_rfc_extension

al_rfc_extension = use_extension("@com_alwaldend_src//tools/rfc/main/bzl:al_rfc_extension.bzl", "al_rfc_extension")
al_rfc_extension.download(name, integrity, rfcs)

Rfc extension

TAG CLASSES

download

Attributes

Name	Description	Type	Mandatory	Default
name	Name	Name	required
integrity	Rfc integrity	Dictionary: String -> String	optional	`{}`
rfcs	Rfcs	List of strings	optional	`[]`

al_rfc_repo

Mon, 01 Jan 0001 00:00:00 +0000

al_rfc_repo

load("@com_alwaldend_src//tools/rfc/main/bzl:al_rfc_repo.bzl", "al_rfc_repo")

al_rfc_repo(name, integrity, repo_mapping, rfcs, url)

Rfc repository

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this repository.	Name	required
integrity	Rfc integrity	Dictionary: String -> String	optional	`{}`
repo_mapping	In `WORKSPACE` context only: a dictionary from local repository name to global repository name. This allows controls over workspace dependency resolution for dependencies of this repository. For example, an entry `"@foo": "@bar"` declares that, for any time this repository depends on `@foo` (such as a dependency on `@foo//some:target`, it should actually resolve that dependency within globally-declared `@bar` (`@bar//some:target`). This attribute is not supported in `MODULE.bazel` context (when invoking a repository rule inside a module extension’s implementation function).	Dictionary: String -> String	optional
rfcs	Rfcs	List of strings	optional	`[]`
url	Url format	String	optional	`"https://www.rfc-editor.org/rfc/{postfix}"`

al_run_tool

Mon, 01 Jan 0001 00:00:00 +0000

al_run_tool

load("@com_alwaldend_src//tools/run_tool/main/bzl:al_run_tool.bzl", "al_run_tool")

al_run_tool(name, tool, executable, test, **kwargs)

Generate either native_test, native_binary, or run_binary target

PARAMETERS

Name	Description	Default Value
name	Target name (required)	none
tool	Tool label to run (required)	none
executable	If True, generate native_binary	`False`
test	If True, generate native_test	`False`
kwargs	kwargs for rules	none

al_sh_library

Mon, 01 Jan 0001 00:00:00 +0000

al_sh_library

load("@com_alwaldend_src//tools/sh/main/bzl:al_sh_library.bzl", "al_sh_library")

al_sh_library(name, shfmt_src, editorconfig_src, shellcheck_src, run_args_src, visibility,
              test_data, **sh_kwargs)

Create targets for a shell library

Targets:

${name}.shfmt_fix: executable to run shfmt
${name}.shfmt_test: test whether the script is formatted
${name}.shellcheck_test: shellcheck test

PARAMETERS

Name Description Default Value

name target name none

shfmt_src

"//tools/shfmt"

editorconfig_src

"//tools/shfmt:editorconfig"

shellcheck_src

"//tools/shellcheck"

run_args_src

"//tools/sh/main/sh:run_args_lib"

visibility

["//:__subpackages__"]

test_data

al_toml_data

Mon, 01 Jan 0001 00:00:00 +0000

al_toml_data

load("@com_alwaldend_src//tools/toml/main/bzl:al_toml_data.bzl", "al_toml_data")

al_toml_data(name, deps, srcs, tomlv)

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
deps	Toml data targets	List of labels	optional	`[]`
srcs	Toml files	List of labels	optional	`[]`
tomlv	Tomlv target to use for validation	Label	optional	`"@com_alwaldend_src//tools/tomlv"`

al_toml_info

Mon, 01 Jan 0001 00:00:00 +0000

AlTomlInfo

load("@com_alwaldend_src//tools/toml/main/bzl:al_toml_info.bzl", "AlTomlInfo")

AlTomlInfo(srcs, deps)

Provide toml data info

FIELDS

Name	Description
srcs	Toml files
deps	Toml data targets

al_toml_validate

Mon, 01 Jan 0001 00:00:00 +0000

al_toml_validate

load("@com_alwaldend_src//tools/toml/main/bzl:al_toml_validate.bzl", "al_toml_validate")

al_toml_validate()

Aspect adding linters for toml files

ASPECT ATTRIBUTES

Name	Type
deps	String

ATTRIBUTES

al_transitive_sources

Mon, 01 Jan 0001 00:00:00 +0000

AlTransitiveSources

load("@com_alwaldend_src//tools/transitive_sources/main/bzl:al_transitive_sources.bzl", "AlTransitiveSources")

AlTransitiveSources(transitive_sources)

Provide transitive sources

FIELDS

Name	Description
transitive_sources	-

al_transitive_sources

load("@com_alwaldend_src//tools/transitive_sources/main/bzl:al_transitive_sources.bzl", "al_transitive_sources")

al_transitive_sources(srcs, deps)

Obtain the source files for a target and its transitive dependencies.

PARAMETERS

Name	Description	Default Value
srcs	a list of source files	none
deps	a list of targets that are direct dependencies	none

RETURNS

a collection of the transitive sources

al_txt_data

Mon, 01 Jan 0001 00:00:00 +0000

al_txt_data

load("@com_alwaldend_src//tools/txt/main/bzl:al_txt_data.bzl", "al_txt_data")

al_txt_data(name, srcs, **kwargs)

Text data

PARAMETERS

Name	Description	Default Value
name	target name	none
srcs	sources	none
kwargs	filegroup kwargs	none

al_unpack_archives

Mon, 01 Jan 0001 00:00:00 +0000

al_unpack_archives

load("@com_alwaldend_src//tools/pkg/main/bzl:al_unpack_archives.bzl", "al_unpack_archives")

al_unpack_archives(name, srcs, out)

Unpack several archives using tar into a directory

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
srcs	-	List of labels	required
out	-	String	optional	`""`

al_vial_configs

Mon, 01 Jan 0001 00:00:00 +0000

al_vial_configs

load("@com_alwaldend_src//tools/vial/main/bzl:al_vial_configs.bzl", "al_vial_configs")

al_vial_configs(name, srcs, visibility, **kwargs)

Generate vial config targets

PARAMETERS

Name	Description	Default Value
name	generated docs archive name	none
srcs	vial config	none
visibility	visibility	`None`
kwargs	kwargs for template_files	none

al_write_script

Mon, 01 Jan 0001 00:00:00 +0000

al_write_script

load("@com_alwaldend_src//tools/sh/main/bzl:al_write_script.bzl", "al_write_script")

al_write_script(name, out, content, make_vars, set_flags, shebang)

Write a script and make it executable

ATTRIBUTES

Name	Description	Type	Mandatory	Default
name	A unique name for this target.	Name	required
out	Output file	Label; nonconfigurable	required
content	Script content	String	required
make_vars	Additional make vars	Dictionary: String -> String	optional	`{}`
set_flags	Flags to pass to set	List of strings	optional	`["-eu"]`
shebang	Sheband to use	String	optional	`"#!/usr/bin/env sh"`

Android

Mon, 01 Jan 0001 00:00:00 +0000

Android cmdtools

Mon, 01 Jan 0001 00:00:00 +0000

Ansible

Mon, 01 Jan 0001 00:00:00 +0000

ansible_lint runs ansible-lint from Bazel-managed Python dependencies. A Go test runner exposes the CLI binaries under their hyphenated names, configures writable Ansible paths, and invokes the linter against workspace-relative sources.

Molecule is not integrated yet. The likely path is to add Molecule to these Python requirements and invoke it through a Bazel-native Go runner, but practical scenarios require choosing and provisioning a Molecule driver before any scenarios can run.

api

Mon, 01 Jan 0001 00:00:00 +0000

Java

load("@rules_java//java:defs.bzl", "java_library")

java_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/forgejo_login:api_java_library",
    ],
)

Golang

load("@rules_go//go:def.bzl", "go_library")

go_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/forgejo_login:forgejo_login",
    ],
)

Proto

syntax = "proto3";

package com.alwaldend.src.tools.vault.forgejo_login.forgejo_login_proto;

option go_package = "git.alwaldend.com/alwaldend/src/tools/vault/forgejo_login/forgejo_login_proto";

message Config {
  string forgejo_url = 1;
  string forgejo_oauth_name = 2;
  string vault_conn = 3;
  string vault_auth = 4;
}

api

Mon, 01 Jan 0001 00:00:00 +0000

Java

load("@rules_java//java:defs.bzl", "java_library")

java_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/harbor_login:api_java_library",
    ],
)

Golang

load("@rules_go//go:def.bzl", "go_library")

go_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/harbor_login:harbor_login",
    ],
)

Proto

syntax = "proto3";

package com.alwaldend.src.tools.vault.harbor_login.harbor_login_proto;

option go_package = "git.alwaldend.com/alwaldend/src/tools/vault/harbor_login/harbor_login_proto";

message Config {
  string harbor_url = 1;
  string vault_conn = 2;
  string vault_auth = 3;
}

api

Mon, 01 Jan 0001 00:00:00 +0000

Java

load("@rules_java//java:defs.bzl", "java_library")

java_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/injector:api_java_library",
    ],
)

Golang

load("@rules_go//go:def.bzl", "go_library")

go_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/injector:injector",
    ],
)

Proto

syntax = "proto3";

package com.alwaldend.src.tools.vault.injector.injector_proto;

option go_package = "git.alwaldend.com/alwaldend/src/tools/vault/injector/injector_proto";

message File {
  string value = 1;
  string from_file = 2;
  map<string, string> extra = 3;
}

message Env {
  string value = 1;
}

message Kv {
  // Secret path
  string path = 1;
  // Secret mount
  string mount = 2;
}

message Op {
  string method = 1;
  string path = 4;
  map<string, string> data = 5;
}

message VaultSsh {
  string backend = 1;
  int64 ttl = 2;
}

message Process {
  string name = 1;
  repeated string args = 2;
}

message Oidc {
  string name = 1;
  string scope = 2;
  string client_id = 3;
  string redirect_uri = 4;
}

message VaultEnv {
  // Vault connection
  string conn = 1;
  // Vault auth
  string auth = 2;
}

message Resource {
  // Resource name
  string name = 1;
  // Vault connection for the resource
  string vault_conn = 2;
  // Vault auth for the resource
  string vault_auth = 3;
  // Dependencies
  repeated string deps = 8;

  oneof res {
    // Vault operation
    Op op = 4;
    // Vault KV secret
    Kv kv = 5;
    // Environment variable
    Env env = 6;
    // File
    File file = 7;
    // Vault environment variables
    VaultEnv vault_env = 9;
    // Ssh key signed by Vautl
    VaultSsh vault_ssh = 10;
    // Run a cmd
    Process process = 11;
    // Create an OIDC token
    Oidc oidc = 12;
  }
}

message Config {
  // Resources
  repeated Resource res = 1;
}

api

Mon, 01 Jan 0001 00:00:00 +0000

Java

load("@rules_java//java:defs.bzl", "java_library")

java_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/pve_login:api_java_library",
    ],
)

Golang

load("@rules_go//go:def.bzl", "go_library")

go_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/pve_login:pve_login",
    ],
)

Proto

syntax = "proto3";

package com.alwaldend.src.tools.vault.pve_login.pve_login_proto;

option go_package = "git.alwaldend.com/alwaldend/src/tools/vault/pve_login/pve_login_proto";

message Config {
  string pve_base_url = 1;
  string pve_redirect_url = 2;
  string pve_realm = 3;
  string vault_conn = 4;
  string vault_auth = 5;
}

api

Mon, 01 Jan 0001 00:00:00 +0000

Java

load("@rules_java//java:defs.bzl", "java_library")

java_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/tf_backend:api_java_library",
    ],
)

Golang

load("@rules_go//go:def.bzl", "go_library")

go_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/vault/tf_backend:tf_backend",
    ],
)

Proto

syntax = "proto3";

package com.alwaldend.src.tools.vault.tf_backend.tf_backend_proto;

option go_package = "git.alwaldend.com/alwaldend/src/tools/vault/tf_backend/tf_backend_proto";

message Config {
  string vault_conn = 1;
  string vault_auth = 2;
  string vault_secret = 3;
  string vault_secret_mount = 4;
}

Ast-grep

Mon, 01 Jan 0001 00:00:00 +0000

Backup

Mon, 01 Jan 0001 00:00:00 +0000

Bazel configs

Mon, 01 Jan 0001 00:00:00 +0000

Harbor

Targets that pull from the private Harbor registry are disabled by default so repository-wide builds work while Harbor is unavailable. Enable them with --config=harbor when the registry is reachable.

Bazel shell worker

Mon, 01 Jan 0001 00:00:00 +0000

Bazelrc

Mon, 01 Jan 0001 00:00:00 +0000

Usage

bazel run //tools/bazelrc:preset.update

The agent profile must not propagate ambient TEMP, TMP, or TMPDIR values into repository rules, actions, host actions, or tests. Those execution contexts use Bazel-managed temporary storage; host tools own any explicit task/run scratch they require.

Agent tests use Bazel’s normal result cache. Tests that inspect undeclared workspace files must opt out with the no-cache tag.

Agent commands use Bazel’s default lockfile update mode. Review and commit generated lockfile changes with dependency changes. CI retains strict lockfile checking; use --lockfile_mode=error for an explicit reproducibility check.

Black

Mon, 01 Jan 0001 00:00:00 +0000

Blender

Mon, 01 Jan 0001 00:00:00 +0000

Buf

Mon, 01 Jan 0001 00:00:00 +0000

Buildifier

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Archive binaries

Each archive binaries entry requires a name and path. It can also set runtime_files to a list of Bazel glob patterns relative to the unpacked archive. The generated <name>_native_binary exposes matching files as runfiles; <name>_filegroup exposes the binary and those same files.

Omit runtime_files when the binary needs no extra runtime files.

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzl

Mon, 01 Jan 0001 00:00:00 +0000

Bzlenv

Mon, 01 Jan 0001 00:00:00 +0000

Rules to create a bazel environment which functions similar to venv

Features

Adds bazel-built tools to ${PATH}
Exports .env

Usage

Create env and activate:

. "$(bazel run //tools/bzlenv)"

Activate existing env:

. .bzlenv/bin/activate

Deactivate env:

bzlenv_deactivate

Cc

Mon, 01 Jan 0001 00:00:00 +0000

//:refresh_compile_commands uses the pinned Hedron extractor. Its archive is declared through use_repo_rule and fetched when the extractor’s package is loaded, rather than during module resolution. LLVM toolchain registration remains automatic.

Cloc

Mon, 01 Jan 0001 00:00:00 +0000

Cmctl

Mon, 01 Jan 0001 00:00:00 +0000

Consul

Mon, 01 Jan 0001 00:00:00 +0000

contracts

Mon, 01 Jan 0001 00:00:00 +0000

Java

load("@rules_java//java:defs.bzl", "java_library")

java_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/git/main/proto/contracts:contracts_java_library",
    ],
)

Golang

load("@rules_go//go:def.bzl", "go_library")

go_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/git/main/proto/contracts:contracts",
    ],
)

Proto

syntax = "proto3";

package git;

option go_package = "git.alwaldend.com/alwaldend/src/tools/git/main/proto/contracts";

message GitSignature {
  string name = 1;
  string email = 2;
  int64 when = 3;
}

message GitCommit {
  string hash = 1;
  GitSignature author = 2;
  GitSignature committer = 3;
  string merge_tag = 4;
  string pgp_signature = 5;
  string message = 6;
  repeated string tags = 7;
  map<string, bool> changed_files = 8;
}

message GitTagAnnotated {
  GitSignature tagger = 1;
  string hash = 2;
  string message = 3;
  string pgp_signature = 4;
}

message GitTag {
  string name = 1;
  string target = 2;
  GitTagAnnotated annotated = 3;
}

message GitRemote {
  string name = 1;
  repeated string urls = 2;
}

message GitInfo {
  map<string, GitCommit> commits = 1;
  repeated string commits_order = 2;
  map<string, GitTag> tags = 3;
  repeated GitRemote remotes = 4;
}

contracts

Mon, 01 Jan 0001 00:00:00 +0000

Java

load("@rules_java//java:defs.bzl", "java_library")

java_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/release/main/proto/contracts:contracts_java_library",
    ],
)

Golang

load("@rules_go//go:def.bzl", "go_library")

go_library(
    name = "name",
    deps = [
        "@com_alwaldend_src//tools/release/main/proto/contracts:contracts",
    ],
)

Proto

syntax = "proto3";

package release;

import "tools/git/main/proto/contracts/contracts.proto";

option go_package = "git.alwaldend.com/alwaldend/src/tools/release/main/proto/contracts";

message ReleaseHash {
  string algo = 1;
  string content = 2;
}

message ReleaseFile {
  repeated ReleaseHash hashes = 1;
  string name = 2;
  string safe_name = 6;
  string url = 3;
  int64 size = 4;
  string local_path = 5;
}

message ReleaseItem {
  ReleaseFile file = 1;
  repeated ReleaseDeployment deployments = 2;
}

message Project {
  string subdir = 1;
  string safe_subdir = 2;
}

message Git {
  git.GitCommit revision = 1;
  repeated git.GitCommit commits = 2;
}

message ReleasePageSectionItemAttr {
  string name = 1;
  string content = 2;
}

message ReleasePageSectionItem {
  string content = 1;
  string content_url = 2;
  repeated ReleasePageSectionItemAttr attrs = 3;
}

message ReleasePageSection {
  string title = 1;
  repeated ReleasePageSectionItem items = 2;
}

message ReleasePage {
  repeated ReleasePageSection sections = 1;
}

message ReleaseDeploymentOci {
  string repository = 1;
  repeated string tags = 2;
}

message ReleaseDeployment {
  ReleaseDeploymentOci oci = 1;
}

message Release {
  repeated ReleaseItem items = 1;
  string name = 2;
  Project project = 3;
  Git git = 4;
}

Dart Sass

Mon, 01 Jan 0001 00:00:00 +0000

Dart Sass binary toolchain, used by Hugo for toCSS "dartsass" builds.

Dnscontrol

Mon, 01 Jan 0001 00:00:00 +0000

Drawio

Mon, 01 Jan 0001 00:00:00 +0000

Reproducible SVGs

drawio_svg in defs.bzl renders named pages from a .drawio file with the pinned Drawio web exporter and the existing pinned Chrome-for-Testing browser. The extraction action unpacks the web application from the Drawio AppImage; rendering uses a small Puppeteer bridge for its export messages. Neither action uses a host display server or accesses the network. JavaScript keeps this adapter close to Drawio’s browser API and the existing Puppeteer dependency.

F-Droid

Mon, 01 Jan 0001 00:00:00 +0000

Pinned fdroidserver environment for local F-Droid builds. The wrapper provisions an isolated Python virtualenv and delegates to fdroid. Use tools/gradle/gradle-wrapper for the Android app’s Gradle build; this tool only drives F-Droid metadata and local builds.

Usage

tools/fdroid/fdroid-wrapper <fdroid-subcommand>

Run from an F-Droid data directory containing config.yml and metadata/. Caches go under the workspace’s ignored out/ tree.

File installer

Mon, 01 Jan 0001 00:00:00 +0000

fj

Mon, 01 Jan 0001 00:00:00 +0000

Flake8

Mon, 01 Jan 0001 00:00:00 +0000

flux

Mon, 01 Jan 0001 00:00:00 +0000

Flux operator

Mon, 01 Jan 0001 00:00:00 +0000

Forgejo

Mon, 01 Jan 0001 00:00:00 +0000

Forgejo login

Mon, 01 Jan 0001 00:00:00 +0000

The plugin registers token removal before issuance, using a unique token name. Startup failure and normal shutdown attempt removal through the authenticated Forgejo browser session, including when creation did not return a usable token. Cleanup parses the complete applications settings page and verifies token absence after deletion. It then logs out the invocation’s browser session and verifies that the retained original cookie no longer accesses authenticated settings. Cleanup failures are reported.

Gazelle

Mon, 01 Jan 0001 00:00:00 +0000

//tools/gazelle:gazelle runs the repository’s Gazelle language plugins. Repository-wide directives remain in root BUILD.bazel, where Gazelle discovers them for all packages. Root //:gazelle and //:gazelle_bin remain compatibility entry points.

//tools/gazelle:gazelle_python_manifest.update refreshes root gazelle_python.yaml; //tools/gazelle:gazelle_python_manifest.test validates its integrity against root requirements.txt. Keeping the manifest at the repository root preserves Python dependency discovery in every package.

Gen client cert

Mon, 01 Jan 0001 00:00:00 +0000

Gen gossip key

Mon, 01 Jan 0001 00:00:00 +0000

Gen root token

Mon, 01 Jan 0001 00:00:00 +0000

Gh

Mon, 01 Jan 0001 00:00:00 +0000

Git

Mon, 01 Jan 0001 00:00:00 +0000

Git filter repo

Mon, 01 Jan 0001 00:00:00 +0000

Gitea

Mon, 01 Jan 0001 00:00:00 +0000

Glab

Mon, 01 Jan 0001 00:00:00 +0000

Go

Mon, 01 Jan 0001 00:00:00 +0000

go_mod

Mon, 01 Jan 0001 00:00:00 +0000

go_mod

go_mod keeps every tracked go.mod file on the Go version configured in tools/go_mod/cmd/go_mod/BUILD.bazel. It discovers files with Git, so ignored scratch files are excluded.

Update all module files:

bazel run //tools/go_mod/cmd/go_mod:update

Check without writing:

bazel test //tools/go_mod/cmd/go_mod:test

The check target is part of //:repo_quality_test.

Gzip

Mon, 01 Jan 0001 00:00:00 +0000

Harbor

Mon, 01 Jan 0001 00:00:00 +0000

Harbor login

Mon, 01 Jan 0001 00:00:00 +0000

The plugin destroys its Harbor session on normal shutdown and checks that the original session ID is rejected by the current-user API. Cleanup uses Harbor’s /c/oidc/logout endpoint (available in newer Harbor releases) and does not follow the optional identity-provider logout redirect. Unsupported endpoints, network failures, or sessions that remain valid are reported as cleanup errors. Session expiry remains server-controlled; forced termination cannot guarantee logout.

The session destruction behavior is defined by Harbor’s OIDC controller. Vault tokens created by the invocation are revoked after session cleanup.

Helm

Mon, 01 Jan 0001 00:00:00 +0000

Hermes install

Mon, 01 Jan 0001 00:00:00 +0000

Usage

Run the pinned Hermes Agent install script:

bazel run //tools/hermes_install

Hooks

Mon, 01 Jan 0001 00:00:00 +0000

The hook installer resolves the repository’s effective hooks directory through Git. This supports linked worktrees and repositories that configure core.hooksPath.

The installed pre-commit hook requires bazel_agent. Bootstrap it before installing the hook:

bazel run --config=agent //projects/bazel_agent:install

Install or update the checked-in hooks:

bazel_agent bazel run //:write_git_hooks

Verify that every hook is current and executable without changing it:

bazel_agent bazel run //:write_git_hooks -- test

Http server

Mon, 01 Jan 0001 00:00:00 +0000

Hugo

Mon, 01 Jan 0001 00:00:00 +0000

Hugo binary toolchain for the repository. Build rules live in rules_hugo.

Injector

Mon, 01 Jan 0001 00:00:00 +0000

Shutdown first drains plugin requests, then stops and waits for resource processes, revokes invocation-owned Vault credentials, and deletes temporary files and SSH key directories. Failed cleanup is reported. Registration after shutdown is rejected; a fetcher removes any unregistered temporary material. Temporary files use mode 0600 and directories use 0700. Deletion is filesystem unlinking, not secure erasure, and cannot run after SIGKILL or host failure.

no_auth explicitly sets the injected VAULT_TOKEN to an empty value so an inherited token is overridden. This does not remove the user’s token-helper file; commands that independently consult that helper may still authenticate. Template errors and OIDC status errors omit input and response contents. OIDC requests honor cancellation and do not follow redirects.

Install file

Mon, 01 Jan 0001 00:00:00 +0000

Isort

Mon, 01 Jan 0001 00:00:00 +0000

Js

Mon, 01 Jan 0001 00:00:00 +0000

Repository JavaScript tooling dependencies belong to the pnpm workspace in tools/. Its package.json and pnpm-lock.yaml own their requested and resolved versions. //tools:node_modules owns the Bazel package store and links; loading the repository root package does not load the npm extension’s generated rules.

Run pnpm with //tools/pnpm, passing --dir with the absolute path to tools/ for dependency updates. Keep lifecycle scripts disabled (--ignore-scripts) when updating the lockfile.

Kt

Mon, 01 Jan 0001 00:00:00 +0000

kubectl

Mon, 01 Jan 0001 00:00:00 +0000

Login

Mon, 01 Jan 0001 00:00:00 +0000

Usage

bazel run //tools/vault/login

Lua

Mon, 01 Jan 0001 00:00:00 +0000

Make install

Mon, 01 Jan 0001 00:00:00 +0000

Maven Install Gradle Converter

Mon, 01 Jan 0001 00:00:00 +0000

Converts rules_jvm_external maven_install.json lock files into Gradle version catalogs and dependency verification metadata so Bazel-built Android apps can maintain the parallel Gradle build required for F-Droid.

Usage

Use the al_gradle_lock Starlark macro from main/bzl/gradle_lock.bzl in your app’s gradle/BUILD.bazel:

load("//tools/maven_install_gradle_converter:defs.bzl", "al_gradle_lock")

al_gradle_lock(
    name = "update",
    lock_file = "//projects/<app>:maven_lock.json",
    tool = "//tools/maven_install_gradle_converter/cmd/gradle_lock_gen",
)

Run bazel run :update_toml_write to regenerate the checked-in version catalog. The corresponding *_write_test target fails when it goes stale.

Gradle owns verification-metadata.xml because it must record the plugin classpath in addition to the Bazel lock. Regenerate it with:

Md

Mon, 01 Jan 0001 00:00:00 +0000

Mermaid

Mon, 01 Jan 0001 00:00:00 +0000

This package exposes the Mermaid CLI as a repository-wide Bazel tool. Bazel provisions the pinned Node toolchain, JavaScript dependency graph, Mermaid CLI, and Chrome-for-Testing browser used by Puppeteer. Rendering runs as a Bazel target or action; it does not use a host browser or download one during an npm lifecycle hook.

The JavaScript launcher runs from Bazel’s output tree. Pass absolute paths when rendering source-tree files directly:

repo_root="$PWD"
bazel_agent bazel run //tools/mermaid:mmdc -- \
  -i "${repo_root}/path/to/diagram.mmd" \
  -o "${repo_root}/path/to/diagram.svg"

Prefer a mermaid_svg action plus write_source_file for maintained diagrams; those targets use declared Bazel paths and need no absolute-path handling.

Minisign

Mon, 01 Jan 0001 00:00:00 +0000

Mypy

Mon, 01 Jan 0001 00:00:00 +0000

Nc

Mon, 01 Jan 0001 00:00:00 +0000

Nmap

Mon, 01 Jan 0001 00:00:00 +0000

Nogo

Mon, 01 Jan 0001 00:00:00 +0000

Nping

Mon, 01 Jan 0001 00:00:00 +0000

Oci

Mon, 01 Jan 0001 00:00:00 +0000

openbao

Mon, 01 Jan 0001 00:00:00 +0000

Opencode

Mon, 01 Jan 0001 00:00:00 +0000

OpenSpec

Mon, 01 Jan 0001 00:00:00 +0000

This package runs the upstream OpenSpec CLI with Bazel’s pinned Node toolchain. tools/package.json pins @fission-ai/openspec to 1.11.0; tools/pnpm-lock.yaml records the package integrities and transitive dependency versions. Package lifecycle scripts are disabled. No global npm installation is needed.

Each component owns an OpenSpec workspace at <owner>/openspec/. The repository’s evolution belongs to infra/src/openspec/, which is the default for the runnable target. Run commands from the enclosing repository root; OPENSPEC_PROJECT selects a different owner directory:

Ops

Mon, 01 Jan 0001 00:00:00 +0000

Oras

Mon, 01 Jan 0001 00:00:00 +0000

Patch

Mon, 01 Jan 0001 00:00:00 +0000

Pkg

Mon, 01 Jan 0001 00:00:00 +0000

Pkgsite

Mon, 01 Jan 0001 00:00:00 +0000

Pnpm

Mon, 01 Jan 0001 00:00:00 +0000

Postcss

Mon, 01 Jan 0001 00:00:00 +0000

Prettier

Mon, 01 Jan 0001 00:00:00 +0000

Print deps

Mon, 01 Jan 0001 00:00:00 +0000

Proto

Mon, 01 Jan 0001 00:00:00 +0000

Proto

Mon, 01 Jan 0001 00:00:00 +0000

Proto

Mon, 01 Jan 0001 00:00:00 +0000

PVE login

Mon, 01 Jan 0001 00:00:00 +0000

The plugin requests an API token with a one-hour expiry and deletes that token on shutdown using the retained login ticket and CSRF token. The token name is registered for cleanup before creation, so cleanup is attempted even when a creation response is lost or malformed. Failures to delete are reported; expiry is the fallback when shutdown cannot complete. Pre-existing credentials are not revoked. Vault tokens created by the invocation are revoked after token cleanup.

Py

Mon, 01 Jan 0001 00:00:00 +0000

The repository Python dependency lock remains in root requirements.txt, next to pyproject.toml. Update it with //tools/py:requirements.update and validate it with //tools/py:requirements.test; the root labels remain compatibility entry points. These upstream pip-tools workflows require network access to resolve and validate package versions and run outside the action sandbox.

Qt

Mon, 01 Jan 0001 00:00:00 +0000

Hermetic Qt

The module configuration downloads SHA-256-pinned Qt 6.8.3 distributions via rules_qt and registers its build tools. Bazel builds do not require Qt under /opt or another host installation.

Rclone

Mon, 01 Jan 0001 00:00:00 +0000

Readme tree

Mon, 01 Jan 0001 00:00:00 +0000

Example

bazel run tools/readme_tree -- parse -g -C "${PWD}" .

Release

Mon, 01 Jan 0001 00:00:00 +0000

Replace section

Mon, 01 Jan 0001 00:00:00 +0000

Repo map

Mon, 01 Jan 0001 00:00:00 +0000

Repository AL configuration

Mon, 01 Jan 0001 00:00:00 +0000

//tools/al:config packages the repository’s shared AL configuration. The root //:al label remains a compatibility alias. The Lua source files stay at the repository root so existing CLI configuration discovery and require("al_lib") imports retain their paths.

The //:tf.* compatibility aliases select Terraform commands declared here with the public rules_terraform command maps and the generic AL wrapper. These bindings use the shared config and explicitly select the repository root as their Terraform working directory.

Repository delivery

Mon, 01 Jan 0001 00:00:00 +0000

repo_delivery implements the deterministic part of repository delivery. It invokes native Git and a selected forge CLI; it does not infer task ownership, choose validation commands, resolve conflicts, or judge review feedback.

Provider and delivery workflow

Run delivery commands from this Git worktree’s repository root, which owns the root MODULE.bazel and tools/repo_delivery. This also applies when changed files belong to a nested Bazel module: its workspace does not own the delivery target. Use the same feature worktree, not another checkout. The baseline works with older installed runners. Detect the provider without printing a credential-bearing remote URL:

Repository quality

Mon, 01 Jan 0001 00:00:00 +0000

This package uses upstream aspect_rules_lint formatting and linting rules to discover Git-tracked files and inspect declared source targets with established tools acquired by Bazel. It does not implement a formatter or linter and does not download tools at runtime. Thin workspace adapters extend the upstream language list with the official Go SDK for module and workspace manifests, StyLua and Selene for Lua, and the existing Prettier XML plugin for Qt .ui and .qrc files.

Resolved toolchain

Mon, 01 Jan 0001 00:00:00 +0000

Rfc

Mon, 01 Jan 0001 00:00:00 +0000

Root Bazel module

Mon, 01 Jan 0001 00:00:00 +0000

MODULE.bazel is generated directly from include.MODULE.bazel files:

bazel run //tools/bazel_module:update

Dependency declarations and pins stay in their owning include files. The small root module(...) header lives in the Go generator. Discovery uses the existing //tools/git host Git wrapper to include tracked and untracked files while respecting Git ignore rules. Deleted files, symlinks, .bazelignore directories, and standalone workspaces beneath MODULE.bazel, WORKSPACE, or WORKSPACE.bazel boundaries are excluded.

Includes are ordered by owning directory, with third_party, tools, then projects before other trees. This keeps the existing precedence between those trees, including toolchain registrations. A parent directory precedes its children. Keep any order-sensitive declarations together in one owning include.

Rules binary toolchain

Mon, 01 Jan 0001 00:00:00 +0000

rules_binary_toolchain creates Bazel toolchains and runnable targets for packaged executable binaries. Archive entries can include runtime files, which the generated binary targets expose through Bazel runfiles.

Rules Dnscontrol

Mon, 01 Jan 0001 00:00:00 +0000

rules_dnscontrol packages a DNSControl JavaScript entrypoint together with its record configuration files and emits a generated requires.json manifest of relative paths matching the Bazel runfiles tree. Record symlinks retain a .json suffix so DNSControl parses them as JSON. Load the manifest with require() and load each listed path with another require() call; DNSControl’s JavaScript loader does not implement CommonJS module.exports.

Rules docs

Mon, 01 Jan 0001 00:00:00 +0000

rules_docs packages Markdown documentation under a common archive prefix.

Documentation rule

Add the module dependency:

bazel_dep(name = "rules_docs", version = "<VERSION>")

Then declare the package documentation. srcs defaults to glob(["*.md"]); visibility is optional.

load("@rules_docs//docs:defs.bzl", "docs_filegroup")

docs_filegroup(
    name = "docs",
    deps = ["child"],
)

Relative dependency names without a colon are normalized to the child package’s docs target. prefix defaults to the current package beneath content/docs/.

Files are packaged at their basename by default. When a package’s sources span subdirectories that hold identically named files, set preserve_paths = True so each source keeps its package-relative path and the destinations stay distinct.

Rules docs Gazelle

Mon, 01 Jan 0001 00:00:00 +0000

rules_docs_gazelle adds a docs_filegroup to existing Bazel packages that contain a README.md. The generated rule loads its macro from rules_docs.

Add rules_docs as a normal dependency and this generator as a development dependency:

bazel_dep(name = "rules_docs", version = "<VERSION>")
bazel_dep(
    name = "rules_docs_gazelle",
    version = "<VERSION>",
    dev_dependency = True,
)

Add the public language target to the repository’s custom Gazelle binary:

load("@gazelle//:def.bzl", "gazelle_binary")

gazelle_binary(
    name = "gazelle_binary",
    languages = [
        "@rules_docs_gazelle//gazelle",
    ],
)

The extension only operates in directories where both a BUILD file and a README.md already exist. Newly generated rules use glob(["*.md"]) and are visible only to their nearest ancestor Bazel package. Existing srcs, deps, visibility, and prefix attributes are preserved.

Rules Hugo

Mon, 01 Jan 0001 00:00:00 +0000

rules_hugo builds Hugo sites with a registered Hugo toolchain. It keeps the site archive in the target configuration and the Hugo binary in the execution configuration so site sources are not rebuilt for the execution platform.

al_hugo_site wraps a site source archive and its PostCSS tooling. al_hugo_run_binary builds the site with the registered Hugo toolchain and al_hugo_binary exposes a runnable Hugo command for a site. The optional al_hugo_worker rule runs the build through a persistent worker.

Rules Promptfoo

Mon, 01 Jan 0001 00:00:00 +0000

rules_promptfoo runs repository skills through a pinned Promptfoo CLI. It keeps dependency resolution reproducible in Bazel while deliberately running model calls only at test runtime.

Setup

Add the module and its skill-provider dependency:

bazel_dep(name = "rules_promptfoo", version = "<VERSION>")
bazel_dep(name = "rules_skills", version = "<VERSION>")

The development checkout uses sibling local_path_override declarations. Published releases must replace those local overrides with registry versions.

Evaluate a skill

load("@rules_promptfoo//promptfoo:defs.bzl", "promptfoo_test")

promptfoo_test(
    name = "answer_question_eval",
    config = "promptfooconfig.yaml",
    skills = ["//projects/agents/skills/answer-question:skill"],
    env_inherit = [
        "CODEX_HOME",
        "CODEX_PATH_OVERRIDE",
    ],
    reuse_codex_login = True,
)

The runner physically copies each selected SkillInfo.files_by_path bundle to an isolated Bazel test-temporary workspace/.agents/skills/<name>/ tree. Point the Codex SDK provider at the exported workspace and, when using a compatible host Codex executable, at the exported executable path:

Rules Promptfoo Gazelle

Mon, 01 Jan 0001 00:00:00 +0000

rules_promptfoo_gazelle generates required, offline promptfoo_validate_test targets for Promptfoo configurations below an evals/ directory. It never creates an evals subpackage and never generates live promptfoo_test targets.

Add rules_promptfoo as a normal dependency and this generator as a development dependency:

bazel_dep(name = "rules_promptfoo", version = "<VERSION>")
bazel_dep(
    name = "rules_promptfoo_gazelle",
    version = "<VERSION>",
    dev_dependency = True,
)

For one-pass skill package creation, also add rules_skills as a normal dependency and rules_skill_gazelle as a development dependency:

bazel_dep(name = "rules_skills", version = "<VERSION>")
bazel_dep(
    name = "rules_skill_gazelle",
    version = "<VERSION>",
    dev_dependency = True,
)

Add both public language targets to the repository’s custom Gazelle binary:

Rules skill

Mon, 01 Jan 0001 00:00:00 +0000

rules_skills packages all files belonging to a Codex skill and validates its instructions and optional OpenAI metadata with a hermetic Bazel aspect.

Getting started

Add the module and register the validation aspect:

bazel_dep(name = "rules_skills", version = "<VERSION>")

build --aspects @rules_skills//skill:defs.bzl%skill_validation_aspect
build --output_groups=+skill_validation

Declare one library in the skill’s named, non-root package:

load("@rules_skills//skill:defs.bzl", "skill_library")

skill_library(
    name = "skill",
    srcs = glob(
        ["**"],
        exclude = [
            "BUILD.bazel",
            "BUILD",
            "evals/**",
        ],
    ),
)

The package’s final path segment is the skill name, so a skill_library cannot be declared in a repository root package. Move a root-level skill into a named subpackage before declaring it.

Rules skill Gazelle

Mon, 01 Jan 0001 00:00:00 +0000

rules_skill_gazelle adds a skill_library(name = "skill") to each named subpackage that contains a SKILL.md. The generated rule loads its macro from the apparent rules_skills repository, so Bzlmod repository mappings are respected.

Add rules_skills as a normal dependency and this generator as a development dependency:

bazel_dep(name = "rules_skills", version = "<VERSION>")
bazel_dep(
    name = "rules_skill_gazelle",
    version = "<VERSION>",
    dev_dependency = True,
)

Add the public language target to the repository’s custom Gazelle binary:

load("@gazelle//:def.bzl", "gazelle_binary")

gazelle_binary(
    name = "gazelle_binary",
    languages = [
        "@rules_skill_gazelle//gazelle",
    ],
)

The generated source bundle is:

Rules template

Mon, 01 Jan 0001 00:00:00 +0000

rules_template provides Bazel rules and a Go command for rendering template files. A registered toolchain supplies the templating executable to build actions.

Getting started

MODULE.bazel:

bazel_dep(name = "rules_template", version = "<VERSION>")
register_toolchains("@rules_template//main/bzl:all")

BUILD.bazel:

Rules Terraform

Mon, 01 Jan 0001 00:00:00 +0000

This standalone module owns reusable Terraform rules. Terraform and provider archives are declared Bazel inputs. Provider downloads belong to the Bzlmod extension; Terraform uses a filesystem mirror containing only the providers selected by its target.

The extension resolves one version per provider source. Consumers select a provider by Bazel label. Explicit version override policy can be added at this resolution boundary later; conflicting versions currently fail resolution.

Repository authentication and backend injection are supplied by the caller. The module does not depend on the enclosing monorepo’s AL or Vault packages.

rules_iso

Mon, 01 Jan 0001 00:00:00 +0000

Module extension that downloads ISO images with http_file and adds a runnable iso_flash target next to each image.

Run tool

Mon, 01 Jan 0001 00:00:00 +0000

Selene

Mon, 01 Jan 0001 00:00:00 +0000

Selene provides correctness-oriented linting for the repository’s hand-maintained Lua files. The repository standard-library description permits the intentional al configuration DSL and Neovim’s vim global while keeping Selene’s ordinary Lua diagnostics enabled.

Sh

Mon, 01 Jan 0001 00:00:00 +0000

Shellcheck

Mon, 01 Jan 0001 00:00:00 +0000

Repo: https://github.com/koalaman/shellcheck

Shfmt

Mon, 01 Jan 0001 00:00:00 +0000

Sops

Mon, 01 Jan 0001 00:00:00 +0000

Stylua

Mon, 01 Jan 0001 00:00:00 +0000

Taplo

Mon, 01 Jan 0001 00:00:00 +0000

Terraform launcher

Mon, 01 Jan 0001 00:00:00 +0000

This implementation launcher reads the generated target sidecar and resolves Terraform, configuration inputs, and provider archives through Bazel runfiles. Consumer targets use the public Terraform rules instead of invoking this binary directly.

The launcher selects the target’s working directory inside the runfiles tree. Source files can remain symlinks, so formatting retains its existing source behavior. Initialization writes lockfiles and Terraform metadata in that runfiles directory. Saved plans and local state retain their normal paths relative to the working directory; the launcher never removes them.

Tf backend

Mon, 01 Jan 0001 00:00:00 +0000

The plugin tracks each running backend for shutdown, including backends created before a later call fails. Shutdown drains HTTP requests before revoking the backend’s invocation-owned Vault credentials. If the shutdown deadline expires, connections are forcibly closed and the timeout is reported. Normal HTTP server closure is not an error. Vault requests use their incoming request context.

Toml

Mon, 01 Jan 0001 00:00:00 +0000

Tomlv

Mon, 01 Jan 0001 00:00:00 +0000

Traefik

Mon, 01 Jan 0001 00:00:00 +0000

Transitive sources

Mon, 01 Jan 0001 00:00:00 +0000

Trufflehog

Mon, 01 Jan 0001 00:00:00 +0000

The normal //tools/trufflehog:repo_test scans the history reachable from the checked-out HEAD and skips unrelated local refs. Run the manual //tools/trufflehog:repo_all_refs_test target explicitly when an audit must include every local Git ref, such as T3 checkpoint refs from other worktrees.

Twine

Mon, 01 Jan 0001 00:00:00 +0000

Txt

Mon, 01 Jan 0001 00:00:00 +0000

Unseal

Mon, 01 Jan 0001 00:00:00 +0000

Vault

Mon, 01 Jan 0001 00:00:00 +0000

Links

Repo: https://github.com/hashicorp/vault

The root //:vault and //:vault.* labels delegate to wrappers in //tools/vault/cmd/workspace, using //tools/al:config. //tools/vault:vault is the standalone CLI; the wrappers add the existing AL environment injection.

Versioning

Mon, 01 Jan 0001 00:00:00 +0000

versioning owns versions for this repository and its first-party projects. It deliberately does not manage versions of third-party dependencies.

The repository uses SemVer-compatible calendar versions:

ordinary development: 0.0.0-dev;
nightly trunk tag: vYYYY.W.0-nightly.YYYYMMDD;
weekly release branch: releases/YYYY.W;
release tag: vYYYY.W.PATCH.

YYYY and W are the ISO week-year and week. The week is not zero-padded, because SemVer forbids leading zeroes in numeric identifiers. Patch zero is the release branch point. Every first-parent commit after that point advances the calculated patch number by one.

Vial

Mon, 01 Jan 0001 00:00:00 +0000

Word lists

Mon, 01 Jan 0001 00:00:00 +0000

Workspace status

Mon, 01 Jan 0001 00:00:00 +0000

Ykman

Mon, 01 Jan 0001 00:00:00 +0000